Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143270.roa
File: AS143270.roa (raw, json)
Hash identifier: CzrxChZa+9yORkKo0t+gNI4q2y1RMPVO1JSRSk64He8=
Subject key identifier: 85:51:22:2C:BE:B7:8B:0A:38:C7:0C:34:56:FA:E2:32:C0:43:93:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 431315E68A0EE070F2147BF94FBC49071C153FCD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143270.roa
Signing time: Mon 25 May 2026 01:20:32 +0000
ROA not before: Mon 25 May 2026 01:15:32 +0000
ROA not after: Mon 24 May 2027 01:20:32 +0000
asID: 143270
IP address blocks: 240a:a26c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:13:15:e6:8a:0e:e0:70:f2:14:7b:f9:4f:bc:49:07:1c:15:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:32 2026 GMT
Not After : May 24 01:20:32 2027 GMT
Subject: CN=8551222CBEB78B0A38C70C3456FAE232C043932D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:e1:15:39:b8:a6:20:fd:68:6b:83:5d:00:
fc:b8:19:ab:48:77:e6:9c:04:2d:70:d6:4f:bf:8f:
f0:ad:62:60:bb:97:70:ff:4d:84:3f:03:70:bd:ea:
f0:b2:47:9f:a6:54:8c:47:cd:d1:c8:1e:f1:3b:7e:
eb:8f:e3:d8:93:e2:57:89:fe:1d:dd:68:79:4a:c1:
73:e0:01:22:a6:1a:95:54:34:d2:aa:a8:91:88:f7:
7d:17:af:25:d2:cb:d2:df:f2:d4:54:79:fa:0a:af:
d1:a2:91:1f:63:f2:5b:b6:3a:05:44:58:79:40:a9:
df:a5:1f:5e:ee:27:e1:e5:da:ab:cc:9a:e7:44:c2:
ae:69:17:05:e3:2e:91:57:65:50:02:18:e2:d8:91:
9a:e5:8a:de:0f:8d:fd:82:59:3b:09:6f:b0:21:b3:
3b:7f:21:36:a3:a1:d3:92:f0:20:e0:fe:cb:7e:41:
72:56:5a:55:51:1c:31:f9:ca:79:a2:5b:57:c0:1e:
83:c4:02:bf:ec:98:1f:07:a0:d2:f6:e2:d3:ba:d7:
48:9c:8a:4f:58:04:20:7f:b1:f0:17:05:96:60:54:
4d:44:4f:e1:bd:8b:90:49:68:87:ac:d7:9f:e4:ea:
ad:88:76:07:96:c5:73:81:08:55:71:ab:2d:83:9f:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:22:2C:BE:B7:8B:0A:38:C7:0C:34:56:FA:E2:32:C0:43:93:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a26c::/32
Signature Algorithm: sha256WithRSAEncryption
3d:12:3b:93:33:3a:88:a2:da:7c:7b:51:18:25:c0:4d:00:5f:
07:c6:1e:29:67:b8:a3:6d:7e:ab:1f:a1:da:f3:3a:e2:13:0b:
b1:27:26:ea:92:2c:10:45:1a:4c:e8:8e:94:fd:6a:b3:16:e6:
ad:f6:02:d5:5e:5a:b8:ac:53:bc:9d:e8:da:7b:c6:88:60:77:
e6:03:14:df:c8:87:fa:51:25:57:1e:6d:b1:45:48:8c:c8:2f:
47:e4:11:22:02:18:7b:6f:2c:17:84:2b:6c:0f:7d:be:98:11:
5d:d4:9e:0e:b9:6e:6b:43:15:58:95:9d:41:ef:37:fa:05:00:
00:1c:d5:d9:d1:6b:78:b7:72:b8:85:ee:c4:05:60:00:89:0d:
19:84:f3:00:bf:b4:c6:ab:2b:2b:a3:11:8d:b0:64:46:0b:9e:
7a:f0:98:1d:19:1f:e6:f0:34:74:ae:36:d5:c3:e4:15:b1:89:
7c:72:4d:c8:07:e5:31:65:49:47:89:e1:8f:86:a7:00:d3:49:
4e:f1:bc:c6:13:ee:69:51:5f:30:4e:d1:4d:1e:b6:fd:6c:f4:
8f:45:64:02:98:bf:15:87:be:56:17:88:20:fc:eb:d5:5b:1b:
f8:8a:f2:52:1c:12:a0:ca:b5:cf:bb:ed:3b:6d:49:8f:ff:7a:
5e:87:3a:68
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQxMV5ooO4HDyFHv5T7xJBxwVP80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzJaFw0yNzA1MjQwMTIwMzJaMDMxMTAvBgNV
BAMTKDg1NTEyMjJDQkVCNzhCMEEzOEM3MEMzNDU2RkFFMjMyQzA0MzkzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgEuEVObimIP1oa4NdAPy4GatI
d+acBC1w1k+/j/CtYmC7l3D/TYQ/A3C96vCyR5+mVIxHzdHIHvE7fuuP49iT4leJ
/h3daHlKwXPgASKmGpVUNNKqqJGI930XryXSy9Lf8tRUefoKr9GikR9j8lu2OgVE
WHlAqd+lH17uJ+Hl2qvMmudEwq5pFwXjLpFXZVACGOLYkZrlit4Pjf2CWTsJb7Ah
szt/ITajodOS8CDg/st+QXJWWlVRHDH5ynmiW1fAHoPEAr/smB8HoNL24tO610ic
ik9YBCB/sfAXBZZgVE1ET+G9i5BJaIes15/k6q2IdgeWxXOBCFVxqy2DnxLLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhVEiLL63iwo4xww0VvriMsBDky0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqibDANBgkqhkiG9w0BAQsFAAOCAQEAPRI7
kzM6iKLafHtRGCXATQBfB8YeKWe4o21+qx+h2vM64hMLsScm6pIsEEUaTOiOlP1q
sxbmrfYC1V5auKxTvJ3o2nvGiGB35gMU38iH+lElVx5tsUVIjMgvR+QRIgIYe28s
F4QrbA99vpgRXdSeDrlua0MVWJWdQe83+gUAABzV2dFreLdyuIXuxAVgAIkNGYTz
AL+0xqsrK6MRjbBkRgueevCYHRkf5vA0dK421cPkFbGJfHJNyAflMWVJR4nhj4an
ANNJTvG8xhPuaVFfME7RTR62/Wz0j0VkApi/FYe+VheIIPzr1Vsb+IryUhwSoMq1
z7vtO21Jj/96Xoc6aA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:36 2026 by rpki-client